ClamWin has false detection: substance-extras-6.0.jar: Java.Exploit.CVE_2013_1491 see https://www.virustotal.com/cs/file/9b2bbb2e3263b3c675527f938d929de36d75733e9bf1ef327240ba91c641597f/analysis/

ClamWin uses the scan engine and signature database provided by the Clam AV project. Please report all false positive detections (and undetected viruses also) to Clam AV at https://www.clamav.net/lang/en/ on the web. Select the Submit A File option. There are links for reporting false positives and for undetected viruses. Be sure to choose the correct link.

Thank you for using ClamWin.

Regards,

Thanks for the answer. I did it.

Thank you. There have been some false positive reports on exploits lately--I had one yesterday. It is hard to get a good signature for an exploit. Most AVs find it harder to detect an exploit than to detect a virus in an ordinary Windows file.

Regards,